METHODS AND SYSTEMS FOR COMPLYING WITH NETWORK SECURITY REQUIREMENTS

摘要

The present invention provides for methods and systems for complying with network security requirements, particularly those defined by NERC CIP. In particular, the invention provides for methods and systems for identifying a set of network security risks on a computing device, refining the set of network security risks requiring documentation as defined by the requirements, creating documentation on the necessity of the network security risks, and creating a report comprising a listing of the refined set of network security risks and documentation for auditing and compliance purposes.

主权项

1. A method of complying with computer network security requirements comprising:
a. Identifying network security risks by scanning one or more device in a network for network security risks selected from open sockets, open ports, running services, and firewalls settings; b. Refining the set of network security risks to those requiring documentation; c. Creating documentation on the network security risks; and d. Creating a report of the network security risks and documentation, wherein the report identifies ports and services that have not been adequately documented according to the network security requirements.